f2fs

December 31, 20197 min read

Linux kernel ttm slab out-of-bounds read

Mounting a crafted f2fs image and running operations triggers a slab out-of-bounds read in ttm_put_pages.

December 17, 20195 min read

Mounting a crafted f2fs image triggers a NULL pointer dereference in f2fs_recover_fsync_data.

December 17, 20196 min read

Mounting a crafted f2fs image triggers a slab out-of-bounds write in __remove_dirty_segment.

December 8, 20197 min read

Mounting a crafted f2fs image triggers a slab out-of-bounds read in init_min_max_mtime.